CVE-2024-38458

Description

References

• seclists.org/fulldisclosure/2024/Jul/12 · Exploit
• xenforo.com/community/threads/xenforo-2-1-15-patch-1-2-2-16-patch-2-and-xenforo-media-gallery-2-1-9-2-2-6-released-includes-security-fixes.222133 · Patch

Weitere Schwachstellen in xenforo

• CVE-2026-74239HOCH 7.2XenForo before 2.3.13 contains a path traversal vulnerability in the style archive importer on Windows deployments that allows authenticated…
• CVE-2026-73321MITTEL 6.5XenForo before 2.3.13 contains an uncontrolled recursion vulnerability in the BBCode parser that allows authenticated attackers to cause per…
• CVE-2026-73320MITTEL 6.1XenForo before 2.3.13 contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to retrieve pri…
• CVE-2026-73319MITTEL 6.1XenForo before 2.3.13 contains a cross-site scripting vulnerability in the dynamic redirect handler that allows unauthenticated attackers to…
• CVE-2026-73318NIEDRIG 3.8XenForo before 2.3.13 contains a missing authorization vulnerability in the force-agreement controller that allows any ACP administrator to …